cutover(ui-merge): build the cutover PR adaptation commit as a measured patch series against the verify tree — lock splice, ui/ manifests, gate ledgers, skills move, decisions C/F/G1, bill items 1–32 (parent #25677, #25752 step 4) #25803

Filing gate ③ + ④: pre-cutover card of the epic #25677 (pm:epic; epic PM session_01RSDL3SFtJaKzcymvCD8RsU). Part of #25677. This is step 4's "commit 2" of #25752, split out so a dev seat builds and measures it while the epic PM runs the freeze, the pin bump and the verify refresh in parallel. Deliverable = a patch series the epic PM applies onto the cutover branch, not a PR of its own.

谁付代价(业务筛): the cutover PR (git subtree add --prefix=ui + one adaptation commit) must read green class-for-class with the last verify run, and the maintainer merges it by hand in one sitting (proposed 2026-10-26 09:00Z). Every adaptation item left out is a red gate in that PR's CI that the maintainer sees and the seat has to explain live; the verify branch #25718 measured each of them over 11 runs (bill items 1–32). Building the series now, in parallel with the freeze, is what lets the sitting happen tomorrow instead of a day later.

维护者速读

切换 PR 的第二个提交(适配提交)交给一个席位先做成补丁序列并在合并布局上测量,PM 在冻结后把它贴到切换分支上。内容全部来自验证分支 11 轮的账单(1–32 项)和你已裁的 C/F/G1。不新增决策。

Inputs (read first)

• The procedure and the bill-made-concrete list: cutover(ui-merge): the switch itself — freeze both repos, git subtree add objectui as ui/ with its adaptation commit, land 4a / PR B / 4b PR 2 in order, migrate open objectui branches and cards, archive the objectui repo (parent #25677, 5/6) #25752 step 4 ("commit 2 = the adaptation commit") and its "Accepted red classes" section.
• The bill with every measurement: /mnt/project-files/d1-merge/out/5-cutover-bill-notes.md (items 1–32; 25–32 added today).
• The measured tree: objectstack branch claude/project-thread-dwhq6r-25697-verify at 9e37acd (= run 8 tree: objectui main of 2026-10-25 ~04:30Z under ui/, spliced + deduped lock, exact @ai-sdk/react 4.0.121). ⛔ Read-only for you: never push to it. objectui main has since merged Pin test-typecheck debt by error IDENTITY, not per-file count #13512 (pin 5874d25, better-auth 1.7.12, ai 7.0.118 exact), [finding] pnpm --filter '<pkg>^...' build fails on an UNMODIFIED origin/main — two independent observations, two different packages, same construct #13513 (26 warm imports), feat(plugin-security): walled bootstrap stops minting the platform-admin grant row; platformAdmin audit service; legacy-grant deprecation pointer (L4) #13514 (2 skills internal), platform-admin re-anchor (L5 removal half): delete the legacy grant-row read — one minor after L4's landing #13515 (9 duration keys renamed), fix(service-storage): scope the sys_file / sys_upload_session update and delete doors to the acting organization (#13178) #13527 (dependabot workflow off); the final pin bump lands at the freeze. Build against 9e37acd and say which items you re-verified against a fresh objectui main subtree.
• 4a's ui-side patch (scripts/ui-import/4a-ui-side.patch, base 9e37acd, in release(ui-merge): one release lane for both scopes — @object-ui joins the fixed group, @objectstack/console builds from ui/apps/console, the objectui pin is deleted (#25711) #25745) is the sibling: ⛔ do not overlap its files (QUICK_REFERENCE release rows, the sync script, .github/workflows under ui/).

What to produce

A patch series under /mnt/project-files/d1-merge/out/cutover-adaptation/ — numbered NN-<slug>.patch (git format-patch output, one logical item per patch), a SERIES.md listing each patch with: bill item(s) / decision it implements, files, the gate it clears, the before/after measurement on the merged layout, and whether it is root-side (applies at the repo root) or ui-side (applies with git apply --directory=ui against objectui main). Root-side and ui-side patches in separate number ranges. The epic PM applies the series onto the cutover branch after the subtree refresh, so every patch must apply with git am --3way on 9e37acd + the series before it.

Items (from #25752 step 4; measurement wins over the wording here):

1. lockfile: scripts/ui-import/splice-lockfile.mjs then pnpm dedupe (5a, items 6/16/28: exact @ai-sdk/react 4.0.121 AND exact ai 7.0.118, one lock copy each); root pnpm-workspace.yaml overrides scoped so objectui's dependency lines are not rewritten (react-router 7, happy-dom 21). ⛔ never re-run splice-lockfile.mjs --out on a spliced base (item 8). Note the lock is the one patch that must be REBUILT on the frozen objectui main, so deliver it as a recipe (commands + expected pnpm dedupe --check output) as well as a patch.
2. ui/ manifests: every @objectstack/* dependency workspace:^; ui/package.json whole-suite test script dropped (item 4); ui/turbo.json parked as turbo.objectui.json; QUICK_REFERENCE rows on workspace:^ (coordinate with 4a's patch: only rows 4a does not touch).
3. gates: check-type-check-coverage.mjs accepts objectui's type-check spelling for members under ui/, remaining findings get ledger rows (item 1); check:lockfile-integrity per-package verdict and check:lockfile-dedupe from the workspace root (items 6/7); root build filter !./ui/apps/site if still needed after A2 (item 3).
4. census: packages/client/src/envelope-caller-census.test.ts — OBJECTUI_CENSUS constant becomes a live LEDGER row for ui/packages/data-objectstack/src/index.ts (analytics.query, production consumer), count 28 → 29 (item 17).
5. skills catalog: ui/skills/objectui → root skills/ (decision C, item 18) — ⛔ skills/** is Tier H; keep this as its own patch and flag it in SERIES.md.
6. decisions carried: root eslint.config.mjs global ignores gains ui/** with the config's own census comment (G1, item 25); check:test-source-alias vitest-alias half scoped to non-ui/ members (F, item 21d; the clocked half is already fixed by tooling(test-source-alias): a type reference or literal text is not a clocked load #25781); check:dts-closure expands * subpath patterns against dist (item 22); scripts/js-comment-mask.mjs stops reading JSX text as a comment opener, pinned self-test (item 23); check:adr-anchors allowlist rows for the ui/**/CHANGELOG.md ADR-0075 lines (item 19); check:undeclared-dep-imports ledger row for ui/apps/console/src with the bundled-SPA evidence (item 20); watch-hint / population declarations list ui/** (item 21a: check:tier-file-adoption, check:turbo-task-graph, check:workspace-manifest-cycles, check:merge-driver, check:cross-package-test-inputs, check:published-files floor, check-closing-keyword-parity ui parsers); ui/.objectstack-pin/** deleted (item 21b); check:agent-test-spelling COUNTER_EXAMPLE_FILES gains { path: 'ui/AGENTS.md', reason } (item 21c amendment); scripts/partition-test-shards.mjs excludes members under ui/ (run 4 note, with item 2 above).
7. Anything else the merged-layout gates print that is not in the accepted-red-classes list of cutover(ui-merge): the switch itself — freeze both repos, git subtree add objectui as ui/ with its adaptation commit, land 4a / PR B / 4b PR 2 in order, migrate open objectui branches and cards, archive the objectui repo (parent #25677, 5/6) #25752: measure, fix if mechanical, otherwise list it in SERIES.md as a new class for the epic PM to rule.

Acceptance

• On 9e37acd + the full series: pnpm install --frozen-lockfile 0; pnpm type-check (root turbo) and the gate families cutover(ui-merge): the switch itself — freeze both repos, git subtree add objectui as ui/ with its adaptation commit, land 4a / PR B / 4b PR 2 in order, migrate open objectui branches and cards, archive the objectui repo (parent #25677, 5/6) #25752 names exit 0, or the residual is exactly the accepted-red-classes list; pnpm lint (root, --no-inline-config) 0 errors; pnpm check:test-source-alias, check:dts-closure, check:adr-anchors, check:undeclared-dep-imports, check:type-check-coverage, check:lockfile-integrity, check:lockfile-dedupe, check:agent-test-spelling, check:tier-file-adoption, check:turbo-task-graph, check:workspace-manifest-cycles, check:merge-driver, check:cross-package-test-inputs, check:published-files, the envelope census test, the JSX-mask self-test: each exit 0 with the before/after in SERIES.md.
• git am --3way of the whole series on a fresh worktree at 9e37acd succeeds; the lock recipe reproduces the lock patch byte-for-byte on that base.
• Report: SERIES.md + one post-stamped comment on this card with the table; no PR.

Size: L (many small mechanical items, each measured). Clause-②: no. Metadata-protocol: none. Responsibility: n/a — epic step.

风险

• The lock patch goes stale the moment objectui main moves; hence the recipe. The ui-side manifest patch may conflict with platform-admin re-anchor (L5 removal half): delete the legacy grant-row read — one minor after L4's landing #13515/Pin test-typecheck debt by error IDENTITY, not per-file count #13512's manifest lines; build it against a fresh objectui main subtree if you can, and say so.
• skills/** and AGENTS.md are Tier H: patches touching them are flagged, never folded into another patch.

Dedupe

The epic's family only (#25752 step 4 is this work; #25753 aftercare takes what is not needed for the sitting). New as a card: the procedure card deliberately kept the adaptation commit for the seat; it is split out now for parallelism under the maintainer's 13:39Z freeze ruling.